Allows to access and configure core passive scanning capabilities.
| currentRule | Deprecated API Endpoint. Its use is discouraged, it will be removed in a future version. Use the currentTasks view instead. Shows information about the passive scan rule currently being run (if any). |
| currentTasks | Shows information about the passive scan tasks currently being run (if any). |
| maxAlertsPerRule | Gets the maximum number of alerts a passive scan rule should raise. |
| recordsToScan | The number of records the passive scanner still has to scan. |
| scanOnlyInScope | Tells whether or not the passive scan should be performed only on messages that are in scope. |
| scanners | Lists all passive scan rules with their ID, name, enabled state, and alert threshold. |
| clearQueue | Clears the passive scan queue. |
| disableAllScanners | Disables all passive scan rules. |
| disableAllTags | Disables all passive scan tags. |
| disableScanners (ids* ) | Disables passive scan rules. |
| enableAllScanners | Enables all passive scan rules. |
| enableAllTags | Enables all passive scan tags. |
| enableScanners (ids* ) | Enables passive scan rules. |
| setEnabled (enabled* ) | Sets whether or not the passive scanning is enabled (Note: the enabled state is not persisted). |
| setMaxAlertsPerRule (maxAlerts* ) | Sets the maximum number of alerts a passive scan rule can raise. |
| setScanOnlyInScope (onlyInScope* ) | Sets whether or not the passive scan should be performed only on messages that are in scope. |
| setScannerAlertThreshold (id* alertThreshold* ) | Sets the alert threshold of a passive scan rule. |